Process handle in a driver

NTFSD
1

Can someone tell me how to obtain a process handle in a driver ? If it is done with NtOpenProcess or ZwOpenProcess, please advise how to setup the call.

Any help is appreciated.
Thanks

2

IoGetCurrentProcess() returns a pointer to an EPROCESS object. You should be
able to call ObOpenObjectByPointer() to get a handle to the process object.

Jamey
-----Original Message-----
From: xxxxx@lists.osr.com
[mailto:xxxxx@lists.osr.com]On Behalf Of Bill
Sent: Monday, April 17, 2000 7:36 PM
To: File Systems Developers
Subject: [ntfsd] Process handle in a driver

Can someone tell me how to obtain a process handle in a driver ? If it is
done with NtOpenProcess or ZwOpenProcess, please advise how to setup the
call.

Any help is appreciated.
Thanks

3

I can’t find ObOpenObjectByPointer in the NT ddk. Is that a function in the IFS kit (which i would have to get) ?

Thanks for the info.
----- Original Message -----
From: Jamey Kirby
To: File Systems Developers
Sent: Monday, April 17, 2000 10:38 PM
Subject: [ntfsd] RE: Process handle in a driver

IoGetCurrentProcess() returns a pointer to an EPROCESS object. You should be able to call ObOpenObjectByPointer() to get a handle to the process object.

Jamey
-----Original Message-----
From: xxxxx@lists.osr.com [mailto:xxxxx@lists.osr.com]On Behalf Of Bill
Sent: Monday, April 17, 2000 7:36 PM
To: File Systems Developers
Subject: [ntfsd] Process handle in a driver

Can someone tell me how to obtain a process handle in a driver ? If it is done with NtOpenProcess or ZwOpenProcess, please advise how to setup the call.

Any help is appreciated.
Thanks